Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
File:                     xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft (raw, json)
Hash identifier:          Xmh06qTyRarWRhwr8qfsMuPIM6ANY+r68+pwdyCIN18=
Subject key identifier:   E2:3E:AB:09:FC:55:F5:07:C9:A4:CB:06:E5:36:59:6D:10:B0:E5:82
Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E
Certificate issuer:       /CN=c592786ced6ce597585468bb4f36b31cf6acec6e
Certificate serial:       019EBEB620C034B6E7002268F452ADCDC968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
Manifest number:          196C
Signing time:             Sat 13 Jun 2026 02:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:07 +0000
Files and hashes:         1: 5nzdgTkkHsT4RLbgZ2GRcxsXvB4.roa (hash: qdwMngtFVt4ZyT/UodrlBdn1CZ1QUvtY6m9NXbdSStU=)
                          2: DYkV04gki79D3asculnZRcHU37Q.roa (hash: qlIkHsV6HBqGkc4tTxIBB1jTZcTStbiHUpGcVOphuGk=)
                          3: X-ehgfatBtOAnRXcz6-5Jx0F8B4.asa (hash: /YVTHqMQAjpDaMD8b9BYDBTtlnwA4KQTEd5uL4RrvtQ=)
                          4: wQTE-RQ3gReLtYxe4QY_Q7yg75Y.roa (hash: xzHJiZgBxtEtCYr9MbTY6G8tT0OCniElkcH6xF7+Cv8=)
                          5: xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl (hash: 9CGaFiBQXgDaFdpfV8mkqTwodNVtwPDGYuN6MZZJXEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:20:c0:34:b6:e7:00:22:68:f4:52:ad:cd:c9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e
        Validity
            Not Before: Jun 13 02:01:07 2026 GMT
            Not After : Jun 14 02:01:07 2026 GMT
        Subject: CN=e23eab09fc55f507c9a4cb06e536596d10b0e582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:92:eb:0a:af:81:1c:68:2c:35:81:2b:7d:88:
                    38:6a:6f:d5:83:5c:8b:0c:2c:5c:5b:da:6e:66:75:
                    f0:93:7a:e9:d3:5b:67:2a:63:4b:bf:36:a7:67:92:
                    bb:aa:65:68:e1:dc:08:05:2a:a0:3d:91:06:40:4c:
                    d5:cc:41:39:70:7e:32:d9:d1:a4:ae:d2:45:10:91:
                    15:44:2c:17:ce:4d:5a:3e:bc:d0:c4:1d:43:c9:04:
                    ec:53:1c:63:50:0e:5a:3b:b0:25:37:88:b3:af:ab:
                    91:ad:9a:6a:d7:99:a5:4f:cb:41:4c:80:60:c9:d4:
                    60:48:6a:54:db:52:c3:60:4a:cd:e8:9f:cd:98:1b:
                    a1:12:1b:38:0a:02:1c:e0:e7:05:88:a1:2b:1e:49:
                    9f:17:0e:a4:35:1b:ea:03:17:ac:b0:8a:cb:f4:cc:
                    cd:77:5c:19:c1:28:a8:d3:8b:9f:24:4d:4d:7a:43:
                    8f:f5:ce:47:ed:fd:57:b2:87:80:83:9f:62:43:7d:
                    44:72:8b:56:31:62:72:e8:bc:e2:ca:f7:5d:32:c0:
                    c4:e0:1a:08:9e:66:3d:e5:1e:d7:eb:6b:91:d2:d3:
                    15:32:08:df:dd:97:5d:38:fa:83:0c:30:8f:1e:98:
                    9d:8a:fd:af:cc:3e:d9:2b:4f:88:16:01:aa:24:a6:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3E:AB:09:FC:55:F5:07:C9:A4:CB:06:E5:36:59:6D:10:B0:E5:82
            X509v3 Authority Key Identifier:
                keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ba:61:4b:16:96:2e:19:07:15:aa:ba:f5:ac:4c:83:c3:46:
         19:fc:19:b9:bd:35:aa:c9:00:59:55:3c:f0:c3:3e:2a:a1:58:
         7a:b7:76:bf:cf:fe:b7:d9:c3:ad:76:07:a1:24:1b:d1:37:99:
         7a:f9:87:7b:1a:1e:03:a9:0e:45:49:da:80:79:61:d6:eb:d7:
         a0:88:fb:fd:3f:3d:45:62:4e:4b:6f:4a:98:8d:34:4b:fc:47:
         a3:28:bc:5e:e8:e5:16:55:72:26:e7:1a:e0:46:57:1b:85:0c:
         61:9d:26:27:9c:df:15:ff:ef:30:2b:ac:fc:89:36:6c:8b:16:
         5a:df:b5:86:d1:c1:84:d6:b1:62:a8:0d:36:7b:95:cc:7d:27:
         ca:89:bd:5a:11:4d:62:51:7e:17:c2:c7:1a:57:3d:2c:1c:87:
         b0:09:bc:96:42:b4:b2:43:df:46:80:19:c2:ac:b8:90:7e:5d:
         00:25:2a:37:fd:ff:cb:c3:d3:49:cf:78:ea:e9:85:dd:ce:17:
         83:04:e8:89:71:39:c8:7e:87:a7:a3:ae:6f:c5:a3:d4:f6:33:
         37:04:ad:9f:1c:d3:29:a1:fb:58:d5:df:41:9c:2f:25:f2:5b:
         8e:8b:38:fa:4a:5b:f9:ba:cb:86:6a:eb:b2:29:39:f2:07:ab:
         4d:63:83:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tiDANLbnACJo9FKtzcloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTI3ODZjZWQ2Y2U1OTc1ODU0NjhiYjRmMzZiMzFjZjZh
Y2VjNmUwHhcNMjYwNjEzMDIwMTA3WhcNMjYwNjE0MDIwMTA3WjAzMTEwLwYDVQQD
EyhlMjNlYWIwOWZjNTVmNTA3YzlhNGNiMDZlNTM2NTk2ZDEwYjBlNTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JLrCq+BHGgsNYErfYg4am/Vg1yL
DCxcW9puZnXwk3rp01tnKmNLvzanZ5K7qmVo4dwIBSqgPZEGQEzVzEE5cH4y2dGk
rtJFEJEVRCwXzk1aPrzQxB1DyQTsUxxjUA5aO7AlN4izr6uRrZpq15mlT8tBTIBg
ydRgSGpU21LDYErN6J/NmBuhEhs4CgIc4OcFiKErHkmfFw6kNRvqAxessIrL9MzN
d1wZwSio04ufJE1NekOP9c5H7f1XsoeAg59iQ31EcotWMWJy6LziyvddMsDE4BoI
nmY95R7X62uR0tMVMgjf3ZddOPqDDDCPHpidiv2vzD7ZK0+IFgGqJKZskQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOI+qwn8VfUHyaTLBuU2WW0QsOWCMB8GA1UdIwQY
MBaAFMWSeGztbOWXWFRou082sxz2rOxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQt
YmEzNzUxMTQwNGMyLzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQtYmEzNzUxMTQwNGMy
LzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLphSxaW
LhkHFaq69axMg8NGGfwZub01qskAWVU88MM+KqFYerd2v8/+t9nDrXYHoSQb0TeZ
evmHexoeA6kORUnagHlh1uvXoIj7/T89RWJOS29KmI00S/xHoyi8XujlFlVyJuca
4EZXG4UMYZ0mJ5zfFf/vMCus/Ik2bIsWWt+1htHBhNaxYqgNNnuVzH0nyom9WhFN
YlF+F8LHGlc9LByHsAm8lkK0skPfRoAZwqy4kH5dACUqN/3/y8PTSc946umF3c4X
gwToiXE5yH6Hp6Oub8Wj1PYzNwStnxzTKaH7WNXfQZwvJfJbjos4+kpb+brLhmrr
sik58gerTWODbw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:38 2026 by rpki-client